NIS 2 in Orbit - Cyber Challenges & Risk Management in Space

The rapid expansion of space-based services has introduced significant cybersecurity challenges. Satellites support essential services such as communications, navigation, and Earth observation, making them prime targets for cyber threats. Building upon the foundational analysis presented in the ENISA "Space Threat Landscape", this paper examines the evolving threat landscape dynamics of the space domain, taking into account the entire lifecycle of satellite systems—from design and development to decommissioning—while considering a comprehensive taxonomy of assets. The threat landscape constructed through an analysis of historical cyber incidents, highlights key threats and proves an assessment of the major threat actors operating within the domain. The paper introduces an interactive tool designed to offer clear and actionable recommendations for securing space systems. This tool leverages a comprehensive analysis of 281 controls, drawn from 13 frameworks, and maps them to each phase of the satellite lifecycle. Additionally, the paper underscores the importance of international cooperation and adherence to cybersecurity standards and regulatory frameworks, such as the NIS 2 Directive, to safeguard the space sector.